$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f01f8ef2-44b6-46f5-b810-0e388203e70f.roa File: f01f8ef2-44b6-46f5-b810-0e388203e70f.roa (raw, json) Hash identifier: TYtfD5dkewhal5p5WrxSySw1t2vLgz8UzJIUgHtH0UI= Subject key identifier: 25:58:A9:99:AA:E6:D7:B8:5D:41:15:8E:73:FD:A6:CD:6B:A4:9E:2E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1CADF199495FA6379BCF8EB842E11E107611859B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f01f8ef2-44b6-46f5-b810-0e388203e70f.roa Signing time: Fri 31 Oct 2025 07:29:17 +0000 ROA not before: Fri 31 Oct 2025 07:29:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f80::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ad:f1:99:49:5f:a6:37:9b:cf:8e:b8:42:e1:1e:10:76:11:85:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:29:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a9fe161b46bf1195c2654d85dddbac391b1b2974d61c87ecadb594a42703c028, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:84:c0:2e:36:d3:59:2e:e2:d9:e0:8c:8c: bc:34:f5:61:ea:88:2e:38:43:57:a9:60:20:20:eb: 12:8e:d9:19:59:76:2c:4e:eb:29:35:29:c0:a1:73: 75:f2:d0:5d:82:1f:32:ff:a5:46:f6:7a:88:e2:2c: cf:01:5f:9b:c3:32:fc:a7:ad:b1:88:db:1a:67:d3: e7:fd:64:f3:90:2e:c4:9d:02:47:55:be:be:94:4d: 1c:75:c9:ce:6b:e6:70:59:df:49:d7:86:5c:fe:3e: 9d:f3:56:fa:37:e3:98:eb:45:0f:9f:2c:b3:01:95: a8:8a:76:46:ef:b5:00:f3:79:b8:30:c1:ee:8d:30: 90:5a:ec:47:e5:ac:51:4f:19:d6:48:ff:94:54:90: c0:9a:11:d6:84:82:11:aa:9e:88:b7:1e:4d:68:5b: 3b:37:c8:6f:8e:51:32:ba:b1:f4:1a:25:e9:51:44: b1:2d:7a:9a:ea:20:90:d9:be:27:8b:03:dd:a8:49: 6b:a9:f6:28:41:20:cf:a5:f0:8e:1b:2a:70:f6:6f: a3:b4:74:d2:f5:43:cd:38:37:7d:47:d5:3a:69:52: 4b:8c:a2:6c:a4:cb:05:47:22:aa:9d:8e:ce:ab:a4: d4:75:8c:62:a7:5e:61:8e:38:e2:fb:f1:fb:f5:f7: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:A9:99:AA:E6:D7:B8:5D:41:15:8E:73:FD:A6:CD:6B:A4:9E:2E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f01f8ef2-44b6-46f5-b810-0e388203e70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f80::/43 Signature Algorithm: sha256WithRSAEncryption 01:9b:2a:a2:09:24:cd:68:aa:56:9d:1d:f8:9e:ae:cf:a9:18: b9:6a:59:15:67:93:e4:99:88:8c:b5:d0:e4:72:da:0b:58:fe: 31:4f:ff:ea:8c:77:48:37:9f:7f:86:6c:e6:85:d3:72:74:47: 2b:a1:84:c8:d5:91:57:1b:fb:aa:37:7d:87:82:52:0b:b6:ac: 84:d1:17:4c:a0:1e:d2:bf:f7:0d:80:45:d7:9b:cd:79:fe:f3: 77:55:ec:74:47:1b:29:15:85:19:a3:92:18:31:a7:d6:e7:bb: 0c:f9:08:40:f3:bf:54:9e:9a:17:d0:c4:b5:7d:85:18:d4:59: 2c:24:d4:dc:ff:d1:5b:79:9a:2c:61:c1:20:fc:7b:64:36:47: 8c:61:3b:1d:7a:8e:20:cf:05:62:89:a3:d1:f5:0f:75:a3:5c: 5e:a9:bf:14:ca:c0:d5:b2:9b:b4:69:f7:2b:b8:7f:8a:d3:fa: 82:63:7a:89:a3:72:e0:20:80:3f:13:14:83:ab:e1:d7:7a:18: c2:f8:01:59:9a:bf:5d:31:dd:7a:e4:4b:41:e0:c5:5e:5b:3d: bb:c4:92:09:7f:98:7a:e7:0e:30:a8:e1:f7:43:27:c0:44:cb: 28:bc:12:4f:95:c9:4e:b9:ad:bc:32:ae:2d:84:1c:38:1e:3b: 45:f7:d7:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHK3xmUlfpjebz464QuEeEHYRhZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyOTE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWZlMTYxYjQ2YmYxMTk1YzI2NTRkODVkZGRiYWMzOTFi MWIyOTc0ZDYxYzg3ZWNhZGI1OTRhNDI3MDNjMDI4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUYYTALjbTWS7i2eCMjLw09WHqiC44Q1epYCAg6xKO2RlZ dixO6yk1KcChc3Xy0F2CHzL/pUb2eojiLM8BX5vDMvynrbGI2xpn0+f9ZPOQLsSd AkdVvr6UTRx1yc5r5nBZ30nXhlz+Pp3zVvo345jrRQ+fLLMBlaiKdkbvtQDzebgw we6NMJBa7EflrFFPGdZI/5RUkMCaEdaEghGqnoi3Hk1oWzs3yG+OUTK6sfQaJelR RLEteprqIJDZvieLA92oSWup9ihBIM+l8I4bKnD2b6O0dNL1Q804N31H1TppUkuM omykywVHIqqdjs6rpNR1jGKnXmGOOOL78fv19wzlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJVipmarm17hdQRWOc/2mzWukni4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YwMWY4ZWYyLTQ0YjYtNDZmNS1iODEwLTBlMzg4MjAzZTcwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAP4AwDQYJKoZIhvcNAQELBQADggEBAAGbKqIJJM1oqladHfiers+p GLlqWRVnk+SZiIy10ORy2gtY/jFP/+qMd0g3n3+GbOaF03J0RyuhhMjVkVcb+6o3 fYeCUgu2rITRF0ygHtK/9w2ARdebzXn+83dV7HRHGykVhRmjkhgxp9bnuwz5CEDz v1SemhfQxLV9hRjUWSwk1Nz/0Vt5mixhwSD8e2Q2R4xhOx16jiDPBWKJo9H1D3Wj XF6pvxTKwNWym7Rp9yu4f4rT+oJjeomjcuAggD8TFIOr4dd6GML4AVmav10x3Xrk S0HgxV5bPbvEkgl/mHrnDjCo4fdDJ8BEyyi8Ek+VyU65rbwyri2EHDgeO0X31wQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:53 2025 by rpki-client